# Director of Security Compliance & Authorization at Second Front Systems

> Remote · region unclear · Director+ · Security · open. Source: https://alderhq.app/jobs/ashby%3Asecond-front-systems%3A03680ea0-ba43-4914-9955-241c2768e50f (read 2026-11-07).

## Facts (observed)

- Company: [Second Front Systems](https://alderhq.app/companies/second-front-systems)
- Location text: Remote
- Where it can be done from (inferred): Remote · region unclear (evidence: "Remote, region not stated")
- Posted: 2026-11-03 (4 days ago)
- First seen by alder: 2026-11-03 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://jobs.ashbyhq.com/second-front-systems/03680ea0-ba43-4914-9955-241c2768e50f
- Skills listed (inferred): AWS, Docker

## Pay and sponsorship

- Posted pay: $200k–$215k per year (from the listing's pay field)
- Licensed UK sponsor: registered as "Second Front Systems Limited" (checked 2026-11-03, [register](https://www.gov.uk/government/publications/register-of-licensed-sponsors-workers))

## Description (the employer's text)

### Director of Security Compliance & Authorization

Second Front Systems is looking for a mission-focused, cloud-native, government-authorization-experienced director of Security Compliance & Authorization to strengthen our security authorization function, leading ISSOs, managers, and engineers protecting Game Warden across DoD and FedRAMP environments.

Operating at the intersection of product security, cloud platforms, and government authorization frameworks, you will be responsible for owning security authorization strategy, control implementation, assessment readiness, and continuous monitoring for Game Warden in DoD and FedRAMP environments.

You will lead the Security Authorization team through authorization cycles, control validation, evidence management, and audit coordination, ensuring that Game Warden maintains current authorizations, passes assessments, and scales securely across national security customers.

We need someone capable of directing authorization packages, eMASS management, and POA&M health across DoD RMF and FedRAMP frameworks; establishing reusable controls, shared evidence, automation for continuous monitoring, and compliance reporting; and serving as primary relationship owner with authorizing officials, 3PAOs, and Security Control Assessors through authorization reviews.

As a key partner to the Chief Information Security Officer, Product, Engineering, Mission Success, and government authorizing officials, you will drive authorization readiness, reduce assessment risk, and create durable compliance infrastructure that scales with product delivery, serving as technical authority on government authorization and the architect of 2F's compliance program.

Note: Candidates must reside in one of our approved hiring hubs:

DC/Maryland/Virginia

Denver/Colorado Springs, CO

This is a full-time position.

### What You’ll Do

Own authorization strategy, control implementation, and continuous monitoring for Game Warden across DoD and FedRAMP environments.

Lead the Security Authorization team; establish priorities, operating rhythms, and processes aligned to government authorization cycles.

Define ownership models and handoffs between Security Authorization, Engineering, and Security Operations for authorization maintenance.

Build an automation-first roadmap identifying capability gaps, staffing needs, technical dependencies, and measurable compliance outcomes.

Direct assessment readiness activities, resolve authorization blockers before submission to authorizing officials and 3PAOs, and own submission decisions.

Establish quality standards and controls for eMASS package management, DISA PPSM registration, assessment evidence, findings, and authorization documentation.

Orchestrate a coordinated compliance approach across DoD RMF, FedRAMP, and customer-specific frameworks using reusable controls and cross-framework mappings.

Manage the audit calendar, vendor relationships with 3PAOs and assessors, and GRC technology investments; report material risks and authorization milestones to leadership.

### What You Bring

Ten or more years of progressive cybersecurity experience with significant responsibility for product security, cloud security, security engineering, or compliance, including at least six years achieving authorizations within government frameworks such as DoD RMF or FedRAMP.

Five or more years leading cybersecurity professionals: setting priorities, developing talent, managing performance, and scaling teams.

Direct experience with DoD and federal security authorization programs, including NIST SP 800-53, NIST SP 800-37, DoD RMF, and FedRAMP assessment and continuous monitoring.

Hands-on experience owning security programs for cloud platforms, SaaS products, or PaaS environments supporting government customers in AWS, containers, CI/CD pipelines, infrastructure as code, and identity and access management.

Practical proficiency with eMASS package management, DISA PPSM registration, assessment evidence tracking, and POA&M management.

Qualification under DoDM 8140.03 for the ISSM work role (722) at Advanced proficiency level.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/ashby%3Asecond-front-systems%3A03680ea0-ba43-4914-9955-241c2768e50f and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.